| Package | Affected versions | Patched versions |
|---|---|---|
| node view permissions | = 7.x-1.0≤ 7.x-1.1 |
The Node View Permissions module 7.x-1.x before 7.x-1.2 for Drupal does not properly implement the hook_query_alter function, which might allow remote attackers to obtain sensitive information by reading a node listing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free